Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.mft
File: xhMnbLymeTwzRXqb8i_BCzgjAfQ.mft (raw, json)
Hash identifier: P23/lDvqbWUmnHXkitiNv6YnGWmukHaAZ4gP3ReZxu4=
Subject key identifier: 54:A9:30:F5:6F:BA:C8:BF:60:79:DB:06:73:6E:EE:B7:8A:26:4D:2F
Authority key identifier: C6:13:27:6C:BC:A6:79:3C:33:45:7A:9B:F2:2F:C1:0B:38:23:01:F4
Certificate issuer: /CN=c613276cbca6793c33457a9bf22fc10b382301f4
Certificate serial: 019D2AA9B78C63FB97FA14C89EB3DE361208
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhMnbLymeTwzRXqb8i_BCzgjAfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 15:00:58 +0000
Manifest this update: Thu 26 Mar 2026 15:00:58 +0000
Manifest next update: Fri 27 Mar 2026 15:00:58 +0000
Files and hashes: 1: Ey9RDTUKNtpxucDL595am7oxv5w.roa (hash: Tn0c8HJjvP0UNfrsMJSn4uo3H3SBrrgbKleOBTQq0Rg=)
2: xhMnbLymeTwzRXqb8i_BCzgjAfQ.crl (hash: Kz/pDdURaq6Islp610yuGy/J51U9AoD0HqGeV6NTr8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhMnbLymeTwzRXqb8i_BCzgjAfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:b7:8c:63:fb:97:fa:14:c8:9e:b3:de:36:12:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c613276cbca6793c33457a9bf22fc10b382301f4
Validity
Not Before: Mar 26 15:00:58 2026 GMT
Not After : Mar 27 15:00:58 2026 GMT
Subject: CN=54a930f56fbac8bf6079db06736eeeb78a264d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:43:bb:62:9c:a1:69:31:4e:0e:72:05:83:af:
cf:69:5a:7e:43:5b:86:04:95:5b:fa:43:7f:c5:f4:
de:20:c1:e6:41:f5:0c:30:cb:44:5d:9e:c7:eb:d6:
55:41:3a:66:5b:97:9c:ed:cf:1c:36:bc:d5:e4:41:
f8:7d:5a:1c:b2:7f:63:23:62:83:8e:4e:9c:31:02:
c1:b7:83:ae:7c:39:c1:f8:96:b6:1c:80:a3:6d:be:
3e:9c:63:65:07:60:2a:2c:b7:f8:bf:e7:2e:87:11:
3b:78:70:8c:a8:7e:94:4d:e9:f7:00:cb:7c:1e:56:
a3:ce:a3:16:39:59:80:c7:3d:5f:d8:c6:1f:7b:2f:
54:e6:31:8a:47:ac:36:19:b0:8e:58:73:81:31:fc:
3f:ac:1c:69:70:04:49:11:7e:c1:30:34:33:0a:df:
70:bd:e5:ca:56:9b:c3:58:50:46:13:f3:fb:65:ae:
31:9e:54:5e:71:ee:01:09:df:c4:d3:3c:b9:c4:bf:
f6:a8:c5:f4:3b:ef:c7:7e:07:5c:ab:15:4c:90:64:
12:fb:4f:b9:5c:5e:00:fd:02:f2:d7:30:35:61:5b:
3b:1f:eb:01:f7:a8:b1:41:d7:51:53:db:a0:9c:8a:
7a:f9:6f:1e:0e:aa:8b:d6:12:e0:10:67:4f:7d:eb:
39:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A9:30:F5:6F:BA:C8:BF:60:79:DB:06:73:6E:EE:B7:8A:26:4D:2F
X509v3 Authority Key Identifier:
keyid:C6:13:27:6C:BC:A6:79:3C:33:45:7A:9B:F2:2F:C1:0B:38:23:01:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhMnbLymeTwzRXqb8i_BCzgjAfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:27:71:be:0a:ae:4e:0a:2e:7d:c6:c3:16:80:9c:bc:04:bc:
11:72:18:de:c0:68:f9:0f:61:ac:be:5d:a6:55:19:e6:a8:f4:
51:e0:3e:ed:c0:ef:e0:b7:da:9a:21:20:c3:00:45:15:62:e0:
de:da:4e:ff:4e:ec:0c:27:01:51:25:55:74:0f:41:09:50:62:
41:50:83:35:b8:c2:9c:6d:46:f6:fc:cb:ed:08:bc:56:b1:99:
36:da:cc:fe:38:a6:f4:e0:6b:20:e9:19:c4:01:75:86:72:12:
b3:d9:55:63:e1:3e:2c:b8:ba:f7:0c:fb:0a:b7:77:0e:99:bf:
38:0c:73:51:87:01:3f:80:55:2a:3d:45:75:39:e3:61:dc:fa:
ca:e8:97:6a:c4:f1:de:65:b3:56:1d:48:3e:08:ef:0d:4e:d8:
b4:c4:23:f5:a9:e9:21:fa:e3:a2:8f:57:9a:47:d6:31:95:c7:
2f:3c:03:de:9e:3c:9d:14:d8:d5:0c:7a:8b:ea:89:c9:29:19:
26:5b:a1:f0:66:92:f7:3f:d7:ae:ee:d2:fa:32:78:80:50:bc:
07:c6:2c:b1:c2:b5:e1:49:41:ab:8f:e6:b1:96:42:be:f2:eb:
65:d7:0c:1a:63:d0:9e:12:84:2c:ba:2c:03:55:20:0d:41:cf:
4c:76:93:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:40:13 2026 by rpki-client